$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: zKLeV9tjRhVqMTnGsTqGNNJDqmpVda02MvkHsxc5YyU= Subject key identifier: 43:48:4C:B8:FD:9D:9E:56:28:1B:21:42:C6:E2:31:13:09:E0:5C:6D Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 3DB5EC7C7BC550F63B1BD8ECA666BEA5ADA31E9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: A3 Signing time: Mon 31 Aug 2026 19:39:12 +0000 Manifest this update: Mon 31 Aug 2026 19:34:12 +0000 Manifest next update: Tue 01 Sep 2026 22:58:12 +0000 Files and hashes: 1: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: WbBNqYaedhew9AUKOdqh5keOeHvKbciUQzrz0usxX6g=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 22:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:ec:7c:7b:c5:50:f6:3b:1b:d8:ec:a6:66:be:a5:ad:a3:1e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Aug 31 19:34:12 2026 GMT Not After : Sep 1 22:58:12 2026 GMT Subject: CN=43484CB8FD9D9E56281B2142C6E2311309E05C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:54:4d:61:5c:0c:97:11:07:ff:e6:1a:bb: 54:15:e4:b6:25:cd:17:aa:db:8e:2a:d5:69:57:90: a0:7f:7f:1f:db:61:60:99:b8:20:49:0d:7b:1f:77: 24:9a:2c:d2:30:81:39:14:61:df:97:89:0a:e8:f4: b8:1a:fc:98:2d:cb:07:1f:d5:0f:4b:00:ee:7b:82: 06:72:10:8b:09:74:e4:80:79:7f:e3:0d:9c:37:ec: 85:46:4e:2b:35:9d:c2:c2:55:0b:3f:66:6f:b2:03: 0c:e1:8c:4f:6e:0c:aa:fa:12:04:95:b8:9a:fb:5a: a7:fc:d6:6b:83:3e:a0:a1:3a:fe:f2:c9:7d:13:be: 11:ee:5d:4a:00:52:b9:f5:47:b4:7b:a4:41:e2:ba: 47:17:d6:6a:95:cc:27:51:bb:86:59:5e:fe:94:27: 91:e4:6e:0f:cb:18:e5:e1:b2:37:95:67:99:5f:1c: 49:c2:d6:71:45:73:de:49:16:48:1b:14:1c:ce:6b: 74:79:89:53:d2:56:95:fb:ae:54:ef:bf:1b:93:31: 4e:e9:be:6d:f7:7a:fa:4e:aa:e6:f5:44:5c:37:bc: 7b:3c:69:51:f4:e4:64:b7:4f:63:1b:3a:51:44:fc: 5c:29:d2:d0:23:40:27:a3:5f:c5:bb:38:52:a1:54: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:4C:B8:FD:9D:9E:56:28:1B:21:42:C6:E2:31:13:09:E0:5C:6D X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a4:fc:f2:40:e6:89:35:c7:1b:0b:49:12:83:e7:59:5c:f1: d9:d4:38:2d:60:ae:04:22:62:7d:de:11:f4:a2:83:4a:90:4c: 13:10:db:48:27:a8:81:d6:33:a0:31:91:97:c5:5e:c5:ff:a4: d2:e9:79:4a:21:5b:31:e6:1d:ce:43:e2:ad:79:b6:8d:37:c3: d0:9c:6f:09:61:18:a3:55:85:52:cd:18:d4:72:a1:89:7a:db: 03:92:45:c0:2a:5c:04:c2:e5:36:77:cb:d7:0d:db:b8:01:cc: d1:a3:a9:19:58:0c:a3:15:2c:b8:57:57:aa:fe:13:e5:4d:58: 96:ad:79:6d:f6:f2:aa:23:62:52:d7:f1:77:20:d4:24:8e:55: 39:9c:88:52:ee:0d:87:f5:7a:1d:70:dc:55:0f:4e:32:c7:1f: 7d:6e:59:f8:c5:c8:1e:04:1f:a4:b2:c9:d5:c2:95:d2:c3:3f: 99:ac:30:5a:36:3b:7d:e9:d1:ec:43:7e:c1:db:17:17:88:43: de:27:40:cd:26:52:ca:3f:6b:aa:0f:18:fd:12:33:89:c3:b5: 55:53:08:29:75:16:81:b0:c2:97:e1:a3:a5:c3:21:0c:c8:8e: 69:3d:8e:df:3d:e7:a7:9f:db:6c:2a:2f:30:4a:d3:68:a5:e3: db:30:5e:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbXsfHvFUPY7G9jspma+pa2jHp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA4MzExOTM0MTJaFw0yNjA5MDEyMjU4MTJaMDMxMTAvBgNV BAMTKDQzNDg0Q0I4RkQ5RDlFNTYyODFCMjE0MkM2RTIzMTEzMDlFMDVDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIlRNYVwMlxEH/+Yau1QV5LYl zReq244q1WlXkKB/fx/bYWCZuCBJDXsfdySaLNIwgTkUYd+XiQro9Lga/Jgtywcf 1Q9LAO57ggZyEIsJdOSAeX/jDZw37IVGTis1ncLCVQs/Zm+yAwzhjE9uDKr6EgSV uJr7Wqf81muDPqChOv7yyX0TvhHuXUoAUrn1R7R7pEHiukcX1mqVzCdRu4ZZXv6U J5Hkbg/LGOXhsjeVZ5lfHEnC1nFFc95JFkgbFBzOa3R5iVPSVpX7rlTvvxuTMU7p vm33evpOqub1RFw3vHs8aVH05GS3T2MbOlFE/Fwp0tAjQCejX8W7OFKhVHpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0hMuP2dnlYoGyFCxuIxEwngXG0wHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6k/PJA5ok1xxsLSRKD51lc8dnUOC1grgQi Yn3eEfSig0qQTBMQ20gnqIHWM6AxkZfFXsX/pNLpeUohWzHmHc5D4q15to03w9Cc bwlhGKNVhVLNGNRyoYl62wOSRcAqXATC5TZ3y9cN27gBzNGjqRlYDKMVLLhXV6r+ E+VNWJateW328qojYlLX8Xcg1CSOVTmciFLuDYf1eh1w3FUPTjLHH31uWfjFyB4E H6SyydXCldLDP5msMFo2O33p0exDfsHbFxeIQ94nQM0mUso/a6oPGP0SM4nDtVVT CCl1FoGwwpfho6XDIQzIjmk9jt8956ef22wqLzBK02il49swXjI= -----END CERTIFICATE-----Generated at Tue Sep 1 03:54:09 2026 by rpki-client